Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38302e302f32342d3234203d3e20323634353731.roa
File:                     3133382e33362e38302e302f32342d3234203d3e20323634353731.roa (raw, json)
Hash identifier:          2C9AOXFbRExHTuVT/7uPhjLCYPv2U13ODbXJmMaQ0II=
Subject key identifier:   99:1E:ED:88:39:01:FB:04:D5:5E:EA:05:F5:CD:11:83:A9:84:AE:8B
Certificate issuer:       /CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Certificate serial:       1DD738562BDF3C87963B7A6641C28A1F02FC78CF
Authority key identifier: 21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38302e302f32342d3234203d3e20323634353731.roa
Signing time:             Mon 18 Sep 2023 14:00:00 +0000
ROA not before:           Mon 18 Sep 2023 13:55:00 +0000
ROA not after:            Mon 16 Sep 2024 14:00:00 +0000
asID:                     264571
IP address blocks:        138.36.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d7:38:56:2b:df:3c:87:96:3b:7a:66:41:c2:8a:1f:02:fc:78:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
        Validity
            Not Before: Sep 18 13:55:00 2023 GMT
            Not After : Sep 16 14:00:00 2024 GMT
        Subject: CN=991EED883901FB04D55EEA05F5CD1183A984AE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:ca:59:93:3e:b6:2f:e4:35:03:00:4b:56:
                    88:e6:c2:ec:f3:e9:40:e5:47:4f:a1:2c:12:96:18:
                    ec:0f:f2:39:dc:24:77:44:28:3b:0e:48:a6:bc:f2:
                    a0:4c:06:36:f2:71:af:2f:86:99:a1:64:45:69:4b:
                    ec:3f:bf:7f:cb:78:fb:e5:4a:a4:34:c2:0b:8e:02:
                    a5:05:15:69:c9:f4:22:96:42:b7:b0:eb:29:57:f2:
                    2c:fe:3d:45:f4:eb:9b:46:be:78:be:6c:91:ef:88:
                    ee:be:f4:77:6d:5d:13:3d:38:76:2b:d6:b8:89:ec:
                    a1:58:22:28:10:22:78:44:48:c9:57:13:32:c7:1d:
                    3e:22:49:2f:22:9c:dc:6c:a6:46:dc:22:57:1f:48:
                    ec:1f:13:f7:a0:f4:73:28:8d:f2:2b:64:17:82:f5:
                    12:f4:1d:17:88:33:9f:94:7c:2b:a7:e4:e2:bb:3a:
                    f2:e8:cf:0a:59:2c:0f:15:83:90:0b:39:30:96:78:
                    8d:d8:1d:d7:82:f8:93:fa:12:ef:61:4e:cc:51:8f:
                    52:d7:41:76:8f:19:b1:26:2d:9b:40:65:c7:6b:ff:
                    9b:f8:35:4d:84:4c:50:2c:97:9a:bc:7e:ae:c0:09:
                    67:99:ad:c9:86:b8:01:00:59:4e:fe:e1:47:0f:61:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1E:ED:88:39:01:FB:04:D5:5E:EA:05:F5:CD:11:83:A9:84:AE:8B
            X509v3 Authority Key Identifier:
                keyid:21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38302e302f32342d3234203d3e20323634353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:85:8e:90:6c:64:fb:90:88:f3:8e:c0:e4:1d:d1:b2:63:ec:
         0d:61:05:ba:5a:7d:9b:9d:f8:24:11:42:57:0b:c1:9a:40:ba:
         df:bf:60:94:89:f5:4e:b6:bf:36:1b:25:ba:a1:f3:93:9a:62:
         3c:75:52:8a:68:3d:36:cf:da:23:81:45:32:9e:6e:4d:3d:40:
         f2:62:08:7e:bb:e4:3e:05:e0:ae:e1:3c:c0:ff:cd:31:2a:bb:
         ad:3c:3e:cd:c6:35:e8:b4:42:e2:2c:6a:5f:c9:cf:ed:47:02:
         d6:f4:26:f4:f9:f4:11:b9:2d:1f:bb:b8:b3:39:53:ba:e5:24:
         e6:29:14:2b:dd:1f:01:28:c5:7a:13:d2:c0:ce:a7:17:4e:d8:
         ea:3c:f6:44:00:07:36:59:d0:67:d5:71:d6:3c:ca:23:bc:9b:
         1c:6b:21:26:24:16:71:70:b6:c1:f3:c7:8e:44:0d:6e:b7:ae:
         9a:8f:b0:65:81:32:b2:be:47:87:9d:15:e6:c6:4b:c9:2f:1a:
         cb:03:dc:d3:70:83:95:b5:31:71:a5:9f:73:85:0c:94:37:35:
         a8:35:b6:9f:eb:f5:ed:bc:91:dd:40:19:98:7c:15:f2:11:1b:
         96:f9:44:e3:fb:de:16:6d:fe:f9:d7:71:a6:75:1c:c0:7e:5b:
         df:67:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org